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DETAILED ACTION 
Response to Amendment 
This office action is in response to amendment filed on 03/10/06. The amendment filed 
on 03/24/06 have been entered and made of record. Therefore, presently pending claims are 1, 6, 
8-9, 30, 32, 34, 54, 59, and 64. 



Response to Arguments 

Applicant's arguments filed 03/10/06 have been fijlly considered but they are not 
persuasive because of following reasons. 

Applicant disagrees with the examiner's assertion that Jones teaches encrypting the 
digital identity data. This is not found persuasive. The applicant does not agree that combining a 
password (identity data) with a random number corresponds to encryption. The applicant cites 
encryption methods that use secret keys such as DBS. However the examiner points out that the 
process of DBS is a process of combining plaintext and a key. The combination results in the 
transformation of the key and the plaintext to cipher text. By definition encryption is the 
transformation of plaintext into ciphertext. There are different algorithms available for the 
encryption. A secure key by definition is a random number. In this application the examiner 
interpreted the serial number as the microprocessor identity and the key as the digital identity. 
The stated information is taught by Gammie (column 12 lines 5-19), The user key does not have 
to be secret as shown on page 8 of the applicant's arguments. The public key is known to the 
public and therefore not second. In addition the system of Jones suggests the result of the 
combination is to convert the password into a value that is not understood except by those that 
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posses the correct password, hence a challenge. Furthermore the Fig. 2 indicates that the 
password in encrypted with the random number using an XOR (part 325 Fig. 2). Since the 
claims do not specify the type of encryption used, then the XOR of Jones in indeed and 
encryption algorithm used to encrypt digital identity data in the form of a password. 

The examiner agrees that the random number of Jones is easily compromised that is 
therefore the motivation to combine Jones and Gammie. Wherein the serial number, which 
corresponds to the microprocessor identity, and the key, which corresponds to the identity data, 
are encrypted in the device as in the system of Gammie. Resulting in a system wherein the key 
(digital identity data) is not subject to compromise as taught by Gammie (column 3 lines 9-15). 
Since it is encrypted using the serial number instead of the random number of Jones. 

The examiner will not interpret to read narrowly the claim language to read exactly from 
the specification, but will interpret the claim language in the broadest reasonable interpretation in 
view of the specification. Therefore, the examiner asserts that the combination of Jones, Gammie 
and Lee do teach or suggest the subject matter broadly recited in claims 1, 6, 8-9, 30, 32, 34, 54, 
59, and 64. Accordingly, rejections for claims 1, 6, 8-9, 30, 32, 34, 54, 59, and 64 are 
respectfully maintained. 

Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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Claims 1, 6, 8-9, 30, 32, 54, and 59 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Jones (5623637) in view of Gammie et al (5237610) and further in view of 
Lee (5,774,544). 

In reference to claim 1, Jones discloses a system for storing a password value and logic 
circuitry for preventing access to information stored on the memory card unless the user of the 
host computer to which the memory card is connected can supply a password matching the 
stored password (abstract). Jones also discloses a microprocessor (Fig. 1 part 260). Jones 
discloses further digital identity data (password part 301 Fig. 2), wherein the digital identity data 
uniquely identifies a user of the digital identity device. The password is digital data that 
uniquely identifies a user because only the user would know the password (column 3 lines 39-43 
in combination with column 8 lines 35-41). The system of Jones contains a memory configured 
to store at least the digital identity data (column 7 Hnes 32-41). The system of Jones discloses 
digital identity data that is encrypted by the digital identity data using an algorithm that uses a 
random number (column 8 lines 4-34) 

Although Jones discloses a microprocessor (Fig. 1 part 260) and the encryption of the 
user data, Jones does not discloses a microprocessor wherein the identity is stored in the 
microprocessor. 

Gammie discloses a system for identifying an authentic user of the decoder using a 
doubly encrypted key wherein the key is encrypted first by a serial number and encrypted again 
by a second serial number (abstract). Therefore the system discloses the encryption of person 
information (key) using serial number (column 12 lines 5-19). 



Application/Control Number: 09/658,387 Page 5 

Art Unit: 2135 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to encrypt the unique user data (key) using the unique device data (serial number) 
as in Gammie in the system of Jones. One of ordinary skill in the art would have been motivated 
to do this because each serial number is unique to the individual device therefore the key will not 
be subject to compromise or recovery (column 3 lines 9-16 in combination with lines 23-26). 

Although Jones discloses a microprocessor and the encryption of the user data, and 
Gammie disclose the encryption of user data with a serial number, neither Jones nor Gammie 
disclose the storage of the serial number in the microprocessor. 

Lee discloses a method and apparatus for encrypting and decrypting a microprocessor 
serial number (abstract). The serial number of Lee is stored in the NVRAM of the CPU. 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to store the serial number in the microprocessor of the device as in Lee in the 
system of Jones. One of ordinary skill in the art would have been motivated to do this because it 
would allow the manufacturer greater control over its product using tracking the product in the 
field back to the original equipment manufacturer (column 1 lines 12-39). 

In reference to claims 6, 54, and 59, wherein the digital identity is for one of the group 
consisting of an individual and a corporation; and wherein the digital identity at least one 
selected from the group consisting of a name, a digital picture, an address, a date of birth, a 
social security number, a driver's license number, a digital photograph, biometric information, 
credit card information, bank account information, an incorporation name, a date and place of 
incorporation, a name of a corporate officer, a corporate partner, and a database administrator 
name (business data, column 1 lines 15-25). 
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In reference to claim 8, wherein the digital identity device further comprises a computer 
an interface configured to enable the digital identity device to communicate with an external 
device (Fig. 1). 

In reference to claim 9, wherein the interface comprises an input/output port (column 5 
lines 50-55). 

In reference to claims 30 and 32, The applicant does not define "binding digital identity 
data," as a result the definition of "binding the digital identity data" is constraining the 
microprocessor identity device to the digital identity data with legal authority. The system of 
Jones discloses using digital signatures techniques can be readily implemented using the 
password protected secure memory (column 9 lines 40-47) therefore binding digital identity data 
associated with the memory device with the memory devices of a microprocessor operatively 
connected to the property. Jones further discloses verifying the identity of the property by 
querying the microprocessor wherein the digital identity data is bound to the card Id. The card 
exchanges the certificate which contains the card Id with the transaction terminal and the 
identities of the authenticated user (column 7 lines 40-50). Jones further discloses determining 
the origin of the electronic communication using the tagged communication (Fig. 2). 

Although Jones discloses the encryption of the user data (password, column 8 lines 4-34), 
Jones does not discloses the encrypting the electronic communication using the digital identity 
data. 

Gammie discloses a system for identifying an authentic user of the decoder using a 
doubly encrypted key wherein the key is encrypted first by a serial number and encrypted again 
by a second serial number (abstract). Therefore the system discloses the encryption of person 
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information (key) using serial number (column 12 lines 5-19). The encryption of the key using 
the serial number binds the serial number to the user identity. 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to encrypt the unique user data (key) using the unique device data (serial number) 
as in Gammie in the system of Jones. One of ordinary skill in the art would have been motivated 
to do this because each serial number is unique to the individual device therefore the key will not 
be subject to compromise or recovery (column 3 lines 9-16 in combination with lines 23-26). 

Although Jones discloses a microprocessor and the encryption of the user data, and 
Gammie disclose the encryption of user data with a serial number, neither Jones nor Gammie 
disclose the storage of the serial number in the microprocessor. 

Lee discloses a method and apparatus for encrypting and decrypting a microprocessor 
serial number (abstract). The serial number of Lee is stored in the NVRAM of the CPU, 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to store the serial number in the microprocessor of the device as in Lee in the 
system of Jones. One of ordinary skill in the art would have been motivated to do this because it 
would allow the manufacturer greater control over its product using tracking the product in the 
field back to the original equipment manufacturer (column 1 lines 12-39). 

Claims 34 and 64 are rejected under 35 U.S.C. 103(a) as being unpatentable over Jones 
(5623637) in view of Gammie et al (5237610) and further in view of Lee (5,774,544) as in claim 
1 and further in view of Guthery and Yap et al (6, 1 1 1,506), 
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In reference to claim 34, is rejected as disclosed in claim 1 above. The additional 
limitation of obtaining digital identity data form a digital device operatively connected to a 
computer in which the electronic document is stored is taught by Guthery, 

Guthery discloses a computer having a microprocessor containing identity information 
(column 5 lines 25-40 in combination with column 6 line 49 to column 7 line 5). The system 
includes obtaining digital identity data from a digital identity device operatively connected to a 
computer in which the electronic document is stored (Fig, 1). Guthery discloses a system that 
comprises a microprocessor (Fig. 2 part 52). Guthery further disclose a system that comprises 
digital identity data wherein the digital identity data is associated with a user of the digital 
identity device; a memory configured to store at least the digital identity data (column 5 lines 7- 
15; column 6 lines 44-50; column 7 lines 13-21; Fig 2 part 58). 

Guthery discloses a card ED (column 7 lines 1-5) which posses as the microprocessor 
identity due to the fact that the card ID belongs to the card; and therefore everything on the card 
and the card only has one microprocessor (Fig. 2). It follows that the ID identifies the contents 
of the card and therefore identifies the microprocessor. Even if the card ID is not a 
microprocessor identity, Paolini discloses a method and apparatus is disclosed for preventing an 
unauthorized computer system form using copied software of data (abstract). The system uses a 
CPU ID (microprocessor ID) of a particular computer system (column 3 lines 1-5). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use a microprocessor ID in the smart card of Paolini in the system of Guthery. 
One of ordinary skill in the art would have been motivated to do this because the ED is a unique 
quantity that can be used to prevent the use of copied software. 
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Although Guthery discloses storing information such as licenses and therefore documents 
(column 6 lines 45-50) and the system has passwords (column 6 lines 62-67) and a program for 
encryption (column 6 lines 25-30), Guthery does not disclose encrypting the documents 

Yap discloses storing documents on the smart card. The documents are encrypted. 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to encrypt the documents as in Yap with the digital identity data of Guthery and 
storing the documents on the smart card as in Guthery. One of ordinary skill in the art would 
have been motivated to do this because it would discourage fougery. 

In reference to claim 64, wherein the digital identity is for one of the group consisting of 
an individual and a corporation; and wherein the digital identity at least one selected from the 
group consisting of a name, a digital picture, an address, a date of birth, a social security number, 
a driver's license number, a digital photograph, biometric information, credit card information, 
bank account information, an incorporation name, a date and place of incorporation, a name of a 
corporate officer, a corporate partner, and a database administrator name (bank information, 
column 7 lines 45-47; and column 6 Hnes 47). 

Conclusion 
Conclusion 

THIS ACTION IS MADE FINAL, Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
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MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paula W. KHmach whose telephone number is (571) 272-38544. 
The examiner can normally be reached on Mon to Thr 9:30 a.m to 5:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained fi"om the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



PWK 

Wednesday, May 17, 2006 




